Can anyone describe the features of the business risk assessment approach to audit?
Tuesday, December 8th, 2009thanks.
Broad question.
A business risk assessment approach is supposed to require the auditor to develop a working understanding of their client’s business, the classes of transactions and account characteristics sufficient to develop an approach to address the risky assertions (completeness, accuracy, existence, etc…) and reduce their audit risk.
The reality – most audit firms pay lip-service to the new standards by developing mountains of checklists that their least experienced people fill out and they change very little about their overall approach. You can spot them immediately if they say that the new standards increased the cost of their audits by 5,10,15, 25+%. I adopted the standards three years ago (before I was required to) and it cut hours by focusing efforts to where efforts deserve to go.
Sorry to come off preachy but those firms give the rest of us a bad name.